FFmpeg n6.1.1 has a vulnerability in the AVI demuxer of the libavformat library which allows for an integer overflow, potentially resulting in a denial-of-service (DoS) condition.
CVSS Details
- CVSS 3.1 Base Score: 6.2
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade ffmpeg | Feb 3, 2025 | Nov 29, 2024 |
| Ffmpeg | — | Upgrade to FFmpeg version 7.0 | Jun 5, 2025 | Nov 29, 2024 |
| Suse | — | Upgrade libpostproc58Upgrade ffmpeg-4Upgrade libavdevice58_13Upgrade ffmpeg-4-libpostproc-develUpgrade libswresample5Upgrade libavcodec61Upgrade libavresample4_0Upgrade libavfilter10Upgrade ffmpeg-4-libavdevice-develUpgrade libavcodec58_134Upgrade libavcodec58_134-32bitUpgrade libavdevice57Upgrade libswscale5_9-32bitUpgrade libavcodec57Upgrade libavutil55Upgrade libavutil56_70-32bitUpgrade ffmpegUpgrade libswresample2-32bitUpgrade ffmpeg-private-develUpgrade libavutil56_70Upgrade libavformat57Upgrade libavresample3Upgrade libpostproc55_9-32bitUpgrade ffmpeg-4-libavutil-develUpgrade libavfilter6Upgrade libavformat57-32bitUpgrade libavdevice57-32bitUpgrade ffmpeg-4-libavcodec-develUpgrade libavformat61Upgrade libpostproc-develUpgrade libavdevice58_13-32bitUpgrade libavfilter7_110-32bitUpgrade libavdevice61Upgrade libswscale8Upgrade libavformat58_76-32bitUpgrade libswresample-develUpgrade libavformat-develUpgrade ffmpeg-4-libswresample-develUpgrade libswresample3_9Upgrade ffmpeg-4-private-develUpgrade ffmpeg-4-libavresample-develUpgrade libswscale4Upgrade libpostproc54Upgrade libavutil59Upgrade libswscale5_9Upgrade libswresample3_9-32bitUpgrade libswresample2Upgrade libavutil55-32bitUpgrade libpostproc54-32bitUpgrade libavresample4_0-32bitUpgrade libavfilter-develUpgrade libavutil-develUpgrade ffmpeg-7Upgrade libavformat58_76Upgrade libswscale4-32bitUpgrade ffmpeg-4-libavfilter-develUpgrade libavcodec57-32bitUpgrade libavcodec-develUpgrade ffmpeg-4-libswscale-develUpgrade libswscale-develUpgrade libpostproc55_9Upgrade libavresample-develUpgrade libavfilter7_110Upgrade libavdevice-develUpgrade libavfilter6-32bitUpgrade ffmpeg-4-libavformat-develUpgrade libavresample3-32bit | Dec 5, 2025 | Jul 17, 2025 |
| Ubuntu | — | Upgrade ffmpeg (Ubuntu Pro)Upgrade libavcodec-dev (Ubuntu Pro) | Jun 26, 2025 | Nov 29, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub